I host a site to stop forum/blog spam but I suspect there would be value in a general-purpose login-test. Of course with a botnet the owner could configure each node to login only twice, as they do with SSH dictionary-attacks.